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AME^DME^ TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. Please amend claims 1-17, 29, 30, 33-38 and 40-42 in the following manner. 

1 - (Currently Amended) A method of managing failures for use in a process 
control system having a unit module and a plurality of control modules communicatively 
coupled to the unit module that cany out a process, the method comprisin g - tho steps of : 

collecting failure information within each of the control modules; 

generating a composite failure code within each of the control modules based on the 
failure information within each control module; 

automatically sending a group of composite failure codes to the unit module; and 

determining whether the process should be stopped based on the group of composite 
failure codes. 

2. (Currently Amended) The method of claim 1, wherein th e st e p of collecting 
failure information within each of the control modules includes thc - atepof generating a list of 
failures within each of the control modules. 

3 . (Currently Amended) The method of claim 2, wherein tho otcp of generating 
the list of failures includes tho step of storing failure information associated with one or more 
of a control loop, sensor and actuator that cany out actions for the control modules. 

4. (Currently Amended) The method of claim 1 , wherein th e st e p of generating 
the composite failure code within each of the control modules based on the failure 
information within each control module includes tho stop of mathematically combining the 
failure information within each control module. 

5 » (Currently Amended) The method of claim 4, wherein tho ctop of 
mathematically combining the failure information includes th e step of calculating a weighted 
sum using the failure information. 
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6. (Currently Amended) The method of claim 1 , wherein tho stop of 
automatically sending the group of composite failure codes to the unit module includes the 
«tep~ef selecting the group of composite failure codes based on a phase of the unit module. 

7. (Currently Amended) The method of claim 6 3 wherein th e step of selecting the 
group of composite failure codes based on the phase of the unit module includes tho Gtop of 
selecting the group of composite failure codes based on a current phase of the unit module, 

8 . (Currently Amended) The method of claim 6, wherein tho otop of tho step of 
selecting the group of composite failure codes based on the current phase of the unit module 
includes the step of selecting a composite failure code associated with a non-subservient 
control module. 

9 - (Currently Amended) The method of claim S, wherein the - step of selecting the 
composite failure code associated with the non-subservient control module includes th e step 
of selecting a failure code based on an explicit request to include the non-subservient module 
in the current phase of the unit module, 

1 0. (Currently Amended) The method of claim 1 , wherein the st e p of determining 

i 

whether the process should be stopped based on the group of composite failure codes i 

i 

includes th e steps of selecting one composite failure code from the group of composite failure ! 
codes and comparing the one selected composite failure code to a first predetermined 
threshold value associated with a determination of whether the process should be stopped. 

1 1 . (Currently Amended The method of claim 1 0, further comprising th e step of 
comparing the one selected composite failure code to a second predetermined threshold value 
associated with a determination that the process should continue. 

12* (Currently Amended) The method of claim 10, wherein th o s tep of selecting 
the one composite failure code from the group of composite failure codes includes th e st e p of 
selecting a worst composite failure code. 
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1 3 . (Currently Amended) The method of claim 12, wherein tho step of selecting 
the worst composite failure code includes th e st e p of selecting a composite failure code 
having the highest numerical value. 

14. (Currently Amended) A method of managing failures for use in a process 
control system having a unit module and a control module communicatively coupled to the 
unit module that carry out a process, the method comprisin g th e step s of : 

collecting failure information within the control module; 

generating a composite failure code within the control module based on the failure 
information within the control module; 

automatically sending the composite failure code to the unit module; and 
determining whether the process should be stopped based on the composite failure 

code. 

15. (Currently Amended) The method of claim 14, wherein th e step of generating 
the composite failure code within the control module based on the failure information within 
the control module includes th e step of mathematically combining the failure information 
within the control module, 

16. (Currently Amended) The method of claim 15, wherein tho otop of 
mathematically combining the failure information includes th e step of calculating a weighted 
sum using the failure information. 

17. (Currently Amended) The method of claim 14, wherein tho step of 
determining whether the process should be stopped based on the composite failure code 
includes th e st e p of comparing the composite failure code to a predetermined threshold value. 
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18. (Original) A system that manages failures for use with a process control 
system having a processor and a unit module and a plurality of control modules 
communicatively coupled to the unit module, the system comprising: 

a computer readable medium; 

a first routine stored on the computer readable medium and adapted to be executed by 
the processor that collects failure information within each of the control modules; 

a second routine stored on the computer readable medium and adapted to be executed 
by the process that generates a composite failure code within each of the control modules 
based on the failure information within each control module; 

a third routine stored on the computer readable medium and adapted to be executed 
by the processor that automatically sends a group of composite failure codes to the unit 
module; and 

a fourth routine stored on the computer readable medium and adapted to be executed 
by the processor that determines whether the process should be stopped based on the group of 
composite failure codes. 

1 9. (Original) The system of claim 1 8, wherein the first routine is further 
adapted to generate a list of failures within each of the control modules, 

20. (Original) The system of claim 1 9, wherein the first routine is further 
adapted to store failure information associated with one or more of a control loop, sensor and 
actuator that carry out actions for the control modules. 

2L (Original) The system of claim 18, wherein the second routine is further 
adapted to mathematically combine the failure information within each of the control 
modules. 

22. (Original) The system of claim 21, wherein the second routine is further 
adapted to calculate a weighted sum using the failure information. 

23 . (Original) The system of claim 1 8, wherein the third routine is further 
adapted to select the group of composite failure codes based on a phase of the unit module. 
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24. (Original) The system of claim 23, wherein the third routine is further 
adapted to select the group of composite failure codes based on a current phase of the unit 
module. 

25 . (Original) The system of claim 1 8, wherein the fourth routine is further 
adapted to select one composite failure code from the group of composite failure codes and 
compare the one composite failure code to a first predetermined threshold value associated 
with a determination of whether the process should be stopped, 

26. (Original) The system of claim 25, wherein the fourth routine is further 
adapted to compare the one composite failure code to a second predetermined threshold value 
associated with a determination that the process should continue. 

27. (Original) The system of claim 25, wherein the fourth routine is further 
adapted to select a worst composite failure code from the group of composite failure codes. 

2 8 v (Original) The system of claim 27, wherein the fourth routine is further 
adapted to select a composite failure code having the highest numerical value to be the worst 
composite failure code. 

29. (Canceled) 

3 0. (Currently Amended) A The device of claim 2 9? that manages failures for use 
in a process control system having a unit module and a plurality of control modules 
communicatively coupled to the unit module that carry out a process, the device comprising: 

a controller having a memory and a processor communicatively coupled to the 
memory, wherein the controller is programmed to use composite failure codes to determine 
whether the process should be stopped: and 

wherein the controller is further programmed to determine whether the process should 
be stopped based on composite failure codes that are associated with ones of the coflfatol 
modules that are currently needed by the unit module to carry out the process. 
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31. (Original) The device of claim 30, wherein the controller is further 
programmed to select one of the composite failure codes and to compare the one selected 
composite failure code to a predetermined threshold value to determine whether the process 
should be stopped. 

32. (Original) The device of claim 3 1 5 wherein the controller is further 
programmed to select a worst composite failure code to be the one selected composite failure 
code. 

33. (Canceled) 

34. (Canceled) 

35. (Canceled) 

36. (Currently Amended) A 33*6 process of claim 3 4 ^ control system for carrying: 
out a process, the process control system comprising: 

a plurality of field devices; 

a controller co™Tnimicativelv coupled to the plurality of field devices and including a 
unit module that carries out at least a portion of the process^ wherein the unit module causes 
the controller to process a group of composite failure codes to determine whether the process 
should be stopped: 

wherein the group of composite failure codes is generated by a plurality of control 
modules, and wherein the plurality of control modules are instantiated within the controller. 

37. (Currently Amended) The process control system of o l oim r34 cl_aim_36, 
wherein each of the control modules uses a list of failures to generate its respective composite 
failure code. 

38. (Currently Amended) A 33*e process control system efehdm-37, foi; carrying 
out a process, the process control system comprising: 

a plurality of field devices; 
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a controller communicatively coupled to the plurality of field devices and including a 
unit module that carries out at least a portion of the process, wherein the un it module causes 
the controller to process a group of composite failure codes to determine whether the process 
should be stopped: 

wherein the group of composite failure codes is generated bv a plurality of control 
modules, and wherein the list of failures includes numerical values associated with one or 
more failures and wherein each of the field devices mathematically combines the numerical . 
values within its respective list of failures to generate its respective failure code. 

39. (Original) The process control system of claim 38, wherein each of the 
control modules mathematically combines the numerical values within its respective list of 
failures by calculating a weighted sum of the numerical values. 

40. (Currently Amended) The process control system of claim 3 3 claim 36, 
wherein the unit module causes the controller to select the group of the composite failure 
codes based on a current phase of the process. 

41. (Currently Amended) The process control system of claim 33 claim 36. 
wherein each of the control modules automatically sends its respective composite failure code 
to the controller. 

4Z (Currently Amended) A The process control system of claim 33, for carrying 
out a process, the process control system comprising: 

a plurality of field devices: 

a cftptrr^ comm unicatively coupled to the plurality of field devices and including a 
unit module that carries out at least a portion of the process, wherein the unit module causes 
the controller to process a group of composite failure codes to determine whether the process 
should be stopped: and 

wherein the controller processes the group of the composite failure codes by selecting 
a worst failure code from the group of the composite failure codes and comparing the worst 
failure code to a predetermined threshold associated with a determination of whether the 
process should be stopped. 
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43 . (Ori gin al) The process control system of claim 42, wherein the controller 
selects a failure code having the highest numerical value from tfce group of the composite 
failure codes to he the worst failure code. 
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